UpHeron
All vulnerabilities

Servers and applications

CVE-2021-41024

A relative path traversal [CWE-23] vulnerabiltiy in FortiOS versions 7.0.0 and 7.0.1 and FortiProxy verison 7.0.0 may allow an unauthenticated, unauthorized attacker to inject path traversal character sequences to disclose sensitive information of the server via the GET request of the login page.

Severity
High 7.5
Published
8 Dec 2021
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Fortinet FortiProxyServers and applications · cpe:a:fortinet:fortiproxy
  • Version 7.0.0
Fortinet FortiOSServers and applications · cpe:o:fortinet:fortios
  • Version 7.0.0
  • Version 7.0.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-41024
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-41024